Huntress researchers have detailed a fast-moving campaign in which attackers abused cloud-hosted ScreenConnect panels to install rogue clients and a custom toolkit, dubbed SCKit, on managed endpoints. At least 288 hosts across 48 Huntress-protected organisations were affected within around 90 minutes on 11 November, with roughly a third compromised in the first ten minutes. Rather […]
Read the original article:
Huntress uncovers SCKit: rogue ScreenConnect toolkit hits 288 hosts in 90 minutes
